Skip to content

Commit

Permalink
fix referer spoofing
Browse files Browse the repository at this point in the history
Match the behavior of network.http.referer.spoofSource (send full URI), to avoid raising entropy unnecessarily.
  • Loading branch information
claustromaniac committed Dec 25, 2018
1 parent 2330c74 commit 49bca5e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/bg/webRequest.js
Original file line number Diff line number Diff line change
Expand Up @@ -95,7 +95,7 @@
if (origin) {
if (referer) {
if (settings.referers) {
newHeaders.push({name:'Referer', value:`${target.origin}/`});
newHeaders.push({name:'Referer', value:`${d.url}`});
console.debug(
`Privacy-Oriented Origin Policy: Referer spoofed (request #${d.requestId})\n${target.origin}`
);
Expand Down

0 comments on commit 49bca5e

Please sign in to comment.